CVE-2022-31188

This is a functional SSRF exploit for CVAT versions prior to 2.0.0, demonstrating how an attacker can force the server to make arbitrary HTTP requests via the `/api/v1/tasks/2/data` endpoint. The exploit uses a multipart/form-data request to inject a malicious URL into the `remote files[0]` parameter.

This repository contains a proof-of-concept for CVE-2022-31188, an SSRF vulnerability in OpenCV CVAT. The exploit demonstrates how an authenticated user can send a malicious HTTP request to access other open ports on the system.